Privacy Policy – How 2jbt Protects Your Data in Pakistan

1. Who We Are

This Privacy Policy applies to the 2jbt platform, accessible at https://2jbt.biz ("2jbt", "we", "us", "our"). 2jbt is an online gaming platform operating primarily for players in Pakistan, offering live dealer card games including Teen Patti, Andar Bahar, Baccarat, and Poker, along with related financial services including PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfers, and Visa/Mastercard cards.

For the purposes of this Privacy Policy, the data controller responsible for the personal information collected through 2jbt is the operating entity behind the platform. All data-related queries and requests should be directed to [email protected], and we will respond within 30 days as a standard commitment.

By registering a 2jbt account and using any part of the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data in the ways described here. If you do not consent, you should not create an account or use the platform.

2. Data We Collect

2jbt collects personal data in three main ways: information you provide directly during registration and account use, information generated automatically through your use of the platform, and information received from third-party service providers such as payment processors during transaction processing.

Information You Provide Directly

• Full name as it appears on your government-issued ID
• Date of birth (for age verification purposes)
• Residential address in Pakistan
• Mobile phone number
• Email address
• CNIC number or passport number (when identity verification is required)
• Payment account details — Easypaisa/JazzCash phone number, bank account IBAN for IBFT, or card details for Visa/Mastercard transactions
• Any supporting documents submitted for KYC verification (e.g., CNIC copy, utility bill)

Information Collected Automatically

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Session timestamps — when you logged in, how long you were active
• Pages visited within the 2jbt platform and navigation patterns
• Game history — every bet placed, game played, and outcome received on your account
• Transaction history — every deposit and withdrawal processed through your account
• Cookie identifiers and similar tracking technologies (described in Section 6)

Information from Third Parties

• Transaction confirmation data from Easypaisa, JazzCash, NayaPay, SadaPay, and bank transfer processors
• Identity verification results from KYC service providers
• Risk and fraud signals from payment security providers

3. How We Use Your Data

Every piece of data collected by 2jbt is used for a specific, defined purpose. We do not use personal data in ways that are unrelated to operating the platform and serving you as a player. The main purposes are:

Account Management and Service Delivery

Your registration information is used to create and manage your 2jbt account, verify your identity, process your PKR deposits and withdrawals, and provide access to the live casino games and platform features. Without this data, we cannot operate your account.

Payment Processing

Financial data — your payment method details and transaction history — is used to process deposits and withdrawals through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card payment. This data is passed to payment processors only to the extent necessary to complete the transaction.

Identity Verification and Anti-Fraud

CNIC or passport information, address details, and supporting documents are used to verify that you meet the eligibility requirements for using 2jbt — primarily that you are at least 18 years of age and are who you say you are. This verification also forms part of our anti-money laundering (AML) compliance process.

Platform Security and Fraud Prevention

Technical data including IP addresses, device identifiers, session patterns, and transaction data is analysed to detect and prevent fraudulent activity, unauthorised account access, bonus abuse, and other prohibited conduct outlined in our Terms and Conditions.

Customer Support

When you contact 2jbt support, the information you provide — and records of your account activity — are used to assist in resolving your query. Support conversations may be retained to help train our team and improve the quality of responses.

Regulatory Compliance

Where required by law or regulation, 2jbt may use and retain your personal data to fulfil obligations under anti-money laundering regulations and other applicable legal requirements. In certain circumstances, this may involve sharing data with regulatory or law enforcement authorities.

Marketing Communications

If you have opted in to receive promotional communications, 2jbt uses your contact details to send information about new games, promotions, and platform updates. You can withdraw this consent at any time through your account communication preferences.

4. Legal Basis for Processing

2jbt processes your personal data based on the following legal grounds, depending on the specific type of processing involved:

• Contractual necessity: Processing your name, payment details, and account data is necessary to deliver the service you signed up for. Without this processing, we cannot operate your 2jbt account.
• Legal obligation: Identity verification, transaction records, and KYC data are processed because we are legally required to maintain them under applicable AML and counter-financing-of-terrorism regulations.
• Legitimate interests: Fraud detection, platform security, and analytics processing are carried out based on our legitimate interest in maintaining a safe and fair gaming environment for all 2jbt players.
• Consent: Marketing communications are sent only when you have given explicit consent. You may withdraw this consent at any time without affecting your ability to use the platform.

5. Sharing Your Personal Data

2jbt does not sell your personal data to any third party. We share personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

Payment Processors

When you deposit or withdraw via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, your payment details are shared with the relevant payment processor to complete the transaction. These processors are contractually required to handle your data securely and to use it only for payment processing purposes.

Identity Verification Providers

When KYC verification is required, your identity documents — such as a CNIC copy — may be shared with a third-party identity verification service to confirm authenticity. These providers operate under strict data processing agreements with 2jbt.

Fraud and Security Services

Technical data including IP addresses and device fingerprints may be shared with fraud prevention services that help 2jbt identify suspicious account activity and protect the platform from abuse.

Legal and Regulatory Authorities

Where required by applicable law, court order, or regulatory authority instruction, 2jbt may be obligated to disclose personal data to law enforcement, financial intelligence units, or other government bodies. We will notify you of such requests where legally permitted to do so.

No Data Sales — Ever

2jbt does not engage in the sale, rental, or brokerage of personal data for marketing, advertising, or any other commercial purpose. This applies to all categories of data collected through the platform.

6. Cookies and Tracking Technologies

2jbt uses cookies and similar tracking technologies to operate the platform, improve user experience, and analyse usage patterns. A cookie is a small text file placed on your device when you visit a website. Most browsers accept cookies by default, but you can configure your browser to decline cookies or to notify you when a cookie is being set.

Types of Cookies Used by 2jbt

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit and security cookies that help protect your account. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences — such as your preferred language or last-visited game category — to personalise your experience across sessions.
• Analytics cookies: Help 2jbt understand how players navigate the platform — which pages are visited most, where users drop off, and how features are used. This data is aggregated and not linked to individual identities.
• Security cookies: Used by our fraud prevention systems to identify unusual behaviour patterns that may indicate account compromise or abuse.

2jbt does not use advertising or tracking cookies that follow you across other websites. The cookies placed by the platform are limited to the 2jbt domain and are not shared with advertising networks.

7. Data Security

Protecting your personal and financial data is a technical and operational priority at 2jbt. The following security measures are in place across the platform:

• HTTPS encryption: All connections between your device and 2jbt use TLS encryption. Your login credentials, payment details, and personal information are never transmitted in plain text.
• Segregated data storage: Personal identification data, financial transaction records, and gameplay logs are stored in separate systems with restricted access. Staff members access only the categories of data necessary for their specific role.
• Access controls: Internal access to player data at 2jbt is controlled through role-based permissions. Access logs are maintained and regularly audited.
• Two-factor authentication: 2jbt supports two-factor authentication for player accounts. We strongly recommend enabling this option from your account settings to add an additional layer of protection beyond your password.
• Fraud monitoring: Automated systems monitor transaction patterns and login behaviour in real time to detect unusual activity. Flagged accounts are reviewed promptly by the security team.

Despite these measures, no internet-based system can guarantee absolute security. In the unlikely event of a data breach that affects your personal information, 2jbt will notify you promptly with details of what occurred, what data was involved, and what steps we are taking in response.

You also have a role in keeping your account secure. Never share your 2jbt password with anyone, enable two-factor authentication, and contact support immediately if you suspect your account has been accessed without your authorisation.

8. Data Retention

2jbt retains personal data for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law. The following general retention periods apply:

• Active accounts: All account data is retained for the full period that your 2jbt account is active. You can request account closure at any time by contacting support.
• Closed accounts — regulatory minimum: After your account is closed, 2jbt is required to retain transaction records and identity verification data for a minimum of five years under applicable AML regulations. This data is held in restricted, read-only storage and is not used for any ongoing operational purpose.
• Support communications: Records of support interactions are retained for up to two years from the date of the conversation to support quality assurance and to provide context in case the same issue recurs.
• Marketing data: If you have opted in to marketing communications and subsequently opt out, your contact details are removed from active marketing lists immediately. A minimal record of your opt-out is retained to ensure we do not contact you again in error.
• Analytics data: Aggregated, anonymised analytics data may be retained indefinitely as it cannot be linked to individual players.

9. Your Data Rights

As a 2jbt player, you have meaningful rights over your personal data. These rights are described below along with how to exercise each one. All data rights requests can be submitted to [email protected] and will be responded to within 30 days.

Right of Access

You have the right to request a copy of the personal data 2jbt holds about you. This includes your registration information, transaction history, gameplay records, and KYC documents. We will provide this in a readable format, typically by email.

Right to Correction

If any personal data we hold about you is inaccurate or out of date, you have the right to request that we correct it. For certain data categories — such as name as it appears on your CNIC — we may ask for updated documentation before making changes.

Right to Deletion

You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected. Please note that we are unable to delete data that we are legally required to retain under AML regulations, even following account closure. We will explain clearly what can and cannot be deleted when responding to your request.

Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data we hold — you may request that we restrict our processing of your data while the matter is investigated. During a restriction, we will hold the data but not actively use it.

Right to Withdraw Marketing Consent

If you have opted in to marketing communications, you may withdraw this consent at any time through your 2jbt account communication preferences, or by contacting support. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

10. Children and Minors

2jbt is strictly an adults-only platform. Registration is limited to individuals who are 18 years of age or older. We do not knowingly collect personal data from anyone under the age of 18.

During the registration process, players are required to confirm that they meet the minimum age requirement. Where there is reason to believe a registered account belongs to a person under 18, the account will be suspended immediately and identity documentation requested. If it is confirmed that the account holder is underage, the account will be closed and data will be handled according to our legal obligations.

If you believe a minor has registered on 2jbt, please contact us at [email protected] so we can investigate and take appropriate action promptly. We take underage access seriously and respond to all such reports as a priority matter.

11. Updates to This Privacy Policy

2jbt reviews this Privacy Policy periodically and updates it when our data practices change, when new legal obligations arise, or when we introduce new platform features that involve data processing. The most recent revision date is always displayed at the top of this page.

When material changes are made to this Privacy Policy, 2jbt will notify registered players via the email address associated with their account. The updated policy will also be posted on this page with a revised effective date. Your continued use of 2jbt after notification of an updated Privacy Policy constitutes your acceptance of the revised terms.

We recommend reviewing this page periodically to stay informed of how your data is handled. If you have questions about any specific aspect of our data practices — whether covered here or not — contact [email protected] and we will provide a clear answer.

12. Contact Us About Privacy

For any questions, concerns, or formal requests related to this Privacy Policy or the handling of your personal data at 2jbt, please contact our support team. We are available 24 hours a day, 7 days a week.

Related documents that form part of the overall privacy and policy framework at 2jbt: Terms and Conditions · Responsible Gaming.